Release v0.37.0-preview.2

What's Changed

• fix(patch): cherry-pick cb7f7d6 to release/v0.37.0-preview.1-pr-24342 to patch version v0.37.0-preview.1 and create version 0.37.0-preview.2 by @gemini-cli-robot in #24842

Full Changelog: v0.37.0-preview.1...v0.37.0-preview.2

Release v0.36.0-nightly.20260407.1c22c5b37

What's Changed

• feat(cli): add role specific metrics to /stats by @cynthialong0-0 in #24659
• split context by @jacob314 in #24623
• fix(cli): remove -S from shebang to fix Windows and BSD execution by @scidomino in #24756
• Fix issue where topic headers can be posted back to back by @gundermanc in #24759
• fix(core): handle partial llm_request in BeforeModel hook override by @krishdef7 in #22326
• fix(ui): improve narration suppression and reduce flicker by @gundermanc in #24635
• fix(ui): fixed auth race condition causing logo to flicker by @devr0306 in #24652
• fix(browser): remove premature browser cleanup after subagent invocation by @gsquared94 in #24753
• Revert "feat(core,cli): prioritize summary for topics (#24608)" by @Abhijit-2592 in #24777
• relax tool sandboxing overrides for plan mode to match defaults. by @DavidAPierce in #24762
• fix(cli): respect global environment variable allowlist by @scidomino in #24767
• fix(cli): ensure skills list outputs to stdout in non-interactive environments by @spencer426 in #24566
• Add an eval for and fix unsafe cloning behavior. by @gundermanc in #24457
• fix(policy): allow complete_task in plan mode by @abhipatel12 in #24771
• feat(telemetry): add browser agent clearcut metrics by @gsquared94 in #24688
• feat(cli): support selective topic expansion and click-to-expand by @Abhijit-2592 in #24793
• temporarily disable sandbox integration test on windows by @ehedlund in #24786
• Remove flakey test by @scidomino in #24837

Full Changelog: v0.36.0-nightly.20260406.15298b28c...v0.36.0-nightly.20260407.1c22c5b37

Release v0.36.0-nightly.20260406.15298b28c

What's Changed

• Terminal Serializer Optimization by @jacob314 in #24485
• Auto configure memory. by @jacob314 in #24474
• Unused error variables in catch block are not allowed by @alisa-alisa in #24487
• feat(core): add background memory service for skill extraction by @SandyTao520 in #24274
• feat: implement high-signal PR regression check for evaluations by @alisa-alisa in #23937
• Fix shell output display by @jacob314 in #24490
• fix(ui): resolve unwanted vertical spacing around various tool output treatments by @jwhelangoog in #24449
• revert(cli): bring back input box and footer visibility in copy mode by @sehoon38 in #24504
• fix(cli): prevent crash in AnsiOutputText when handling non-array data by @sehoon38 in #24498
• feat(cli): support default values for environment variables by @ruomengz in #24469
• Implement background process monitoring and inspection tools by @cocosheng-g in #23799
• docs(browser-agent): update stale browser agent documentation by @gsquared94 in #24463
• fix: enable browser_agent in integration tests and add localhost fixture tests by @gsquared94 in #24523
• fix(browser): handle computer-use model detection for analyze_screenshot by @gsquared94 in #24502
• feat(core): Land ContextCompressionService by @joshualitt in #24483
• feat(core): scope subagent workspace directories via AsyncLocalStorage by @SandyTao520 in #24445
• Update ink version to 6.6.7 by @jacob314 in #24514
• fix(acp): handle all InvalidStreamError types gracefully in prompt by @sripasg in #24540
• Fix crash when vim editor is not found in PATH on Windows by @Nagajyothi-tammisetti in #22423
• fix(core): move project memory dir under tmp directory by @SandyTao520 in #24542
• Enable 'Other' option for yesno question type by @ruomengz in #24545
• fix(cli): clear stale retry/loading state after cancellation (#21096) by @Aaxhirrr in #21960
• Changelog for v0.37.0-preview.0 by @gemini-cli-robot in #24464
• feat(core): implement context-aware persistent policy approvals by @jerop in #23257
• docs: move agent disabling instructions and update remote agent status by @jackwotherspoon in #24559
• feat(cli): migrate nonInteractiveCli to LegacyAgentSession by @adamfweidman in #22987
• fix(core): unsafe type assertions in Core File System #19712 by @aniketsaurav18 in #19739
• fix(ui): hide model quota in /stats and refactor quota display by @danzaharia1 in #24206
• Changelog for v0.36.0 by @gemini-cli-robot in #24558
• Changelog for v0.37.0-preview.1 by @gemini-cli-robot in #24568
• docs: add missing .md extensions to internal doc links by @ishaan-arora-1 in #24145
• fix(ui): fixed table styling by @devr0306 in #24565
• fix(core): pass includeDirectories to sandbox configuration by @galz10 in #24573
• feat(ui): enable "TerminalBuffer" mode to solve flicker by @jacob314 in #24512
• docs: clarify release coordination by @scidomino in #24575
• fix(core): remove broken PowerShell translation and fix native __write in Windows sandbox by @scidomino in #24571
• Add instructions for how to start react in prod and force react to prod mode by @jacob314 in #24590
• feat(cli): minimalist sandbox status labels by @galz10 in #24582
• Feat/browser agent metrics by @kunal-10-cloud in #24210
• test: fix Windows CI execution and resolve exposed platform failures by @ehedlund in #24476
• feat(core,cli): prioritize summary for topics (#24608) by @Abhijit-2592 in #24609
• show color by @jacob314 in #24613
• feat(cli): enable compact tool output by default (#24509) by @jwhelangoog in #24510
• fix(core): inject skill system instructions into subagent prompts if activated by @abhipatel12 in #24620
• fix(core): improve windows sandbox reliability and fix integration tests by @ehedlund in #24480
• fix(core): ensure sandbox approvals are correctly persisted and matched for proactive expansions by @galz10 in #24577
• feat(cli) Scrollbar for input prompt by @jacob314 in #21992
• Do not run pr-eval workflow when no steering changes detected by @alisa-alisa in #24621
• Fix restoration of topic headers. by @gundermanc in #24650
• feat(core): discourage update topic tool for simple tasks by @Samee24 in #24640
• fix(core): ensure global temp directory is always in sandbox allowed paths by @galz10 in #24638
• fix(core): detect uninitialized lines by @jacob314 in #24646
• docs: update sandboxing documentation and toolSandboxing settings by @galz10 in #24655
• feat(cli): enhance tool confirmation UI and selection layout by @galz10 in #24376
• feat(acp): add support for /about command by @sripasg in #24649

New Contributors

• @Nagajyothi-tammisetti made their first contribution in #22423
• @aniketsaurav18 made their first contribution in #19739
• @danzaharia1 made their first contribution in #24206
• @ishaan-arora-1 made their first contribution in #24145

Full Changelog: v0.36.0-nightly.20260402.13ccc1645...v0.36.0-nightly.20260406.15298b28c

Release v0.37.0-preview.1

What's Changed

• fix(patch): cherry-pick 64c928f to release/v0.37.0-preview.0-pr-23257 to patch version v0.37.0-preview.0 and create version 0.37.0-preview.1 by @gemini-cli-robot in #24561

Full Changelog: v0.37.0-preview.0...v0.37.0-preview.1

Release v0.36.0-nightly.20260402.13ccc1645

What's Changed

• fix(core): ensure subagent tool updates apply configuration overrides immediately by @abhipatel12 in #23161
• fix(cli): resolve flicker at boundaries of list in BaseSelectionList by @jackwotherspoon in #23298
• test(cli): force generic terminal in tests to fix snapshot failures by @abhipatel12 in #23499
• Evals: PR Guidance adding workflow by @alisa-alisa in #23164
• feat(core): refactor SandboxManager to a stateless architecture and introduce explicit Deny interface by @ehedlund in #23141
• feat(core): add event-translator and update agent types by @adamfweidman in #22985
• perf(cli): parallelize and background startup cleanup tasks by @sehoon38 in #23545
• fix: "allow always" for commands with paths by @scidomino in #23558
• fix(cli): prevent terminal escape sequences from leaking on exit by @mattKorwel in #22682
• feat(cli): implement full "GEMINI CLI" logo for logged-out state by @keithguerin in #22412
• fix(plan): reserve minimum height for selection list in AskUserDialog by @ruomengz in #23280
• fix(core): harden AgentSession replay semantics by @adamfweidman in #23548
• test(core): migrate hook tests to scheduler by @abhipatel12 in #23496
• chore(config): disable agents by default by @abhipatel12 in #23546
• fix(ui): make tool confirmations take up entire terminal height by @devr0306 in #22366
• fix(core): prevent redundant remote agent loading on model switch by @adamfweidman in #23576
• refactor(core): update production type imports from coreToolScheduler by @abhipatel12 in #23498
• feat(cli): always prefix extension skills with colon separator by @NTaylorMullen in #23566
• fix(core): properly support allowRedirect in policy engine by @scidomino in #23579
• fix(cli): prevent subcommand shadowing and skip auth for commands by @mattKorwel in #23177
• fix(test): move flaky tests to non-blocking suite by @mattKorwel in #23259
• Changelog for v0.35.0-preview.3 by @gemini-cli-robot in #23574
• feat(skills): add behavioral-evals skill with fixing and promoting guides by @abhipatel12 in #23349
• refactor(core): delete obsolete coreToolScheduler by @abhipatel12 in #23502
• Changelog for v0.35.0-preview.4 by @gemini-cli-robot in #23581
• feat(core): add LegacyAgentSession by @adamfweidman in #22986
• feat(test-utils): add TestMcpServerBuilder and support in TestRig by @abhipatel12 in #23491
• fix(core)!: Force policy config to specify toolName by @kschaab in #23330
• eval(save_memory): add multi-turn interactive evals for memoryManager by @SandyTao520 in #23572
• fix(telemetry): patch memory leak and enforce logPrompts privacy by @spencer426 in #23281
• perf(cli): background IDE client to speed up initialization by @sehoon38 in #23603
• fix(cli): prevent Ctrl+D exit when input buffer is not empty by @wtanaka in #23306
• fix: ACP: separate conversational text from execute tool command title by @sripasg in #23179
• feat(evals): add behavioral evaluations for subagent routing by @Samee24 in #23272
• refactor(cli,core): foundational layout, identity management, and type safety by @jwhelangoog in #23286
• fix(core): accurately reflect subagent tool failure in UI by @abhipatel12 in #23187
• Changelog for v0.35.0-preview.5 by @gemini-cli-robot in #23606
• feat(ui): implement refreshed UX for Composer layout by @jwhelangoog in #21212
• fix: API key input dialog user interaction when selected Gemini API Key by @kartikangiras in #21057
• docs: update /mcp refresh to /mcp reload by @adamfweidman in #23631
• Implementation of sandbox "Write-Protected" Governance Files by @DavidAPierce in #23139
• feat(sandbox): dynamic macOS sandbox expansion and worktree support by @galz10 in #23301
• fix(acp): Pass the cwd to AcpFileSystemService to avoid looping failures in asking for perms to write plan md file by @sripasg in #23612
• fix(plan): sandbox path resolution in Plan Mode to prevent hallucinations by @Adib234 in #22737
• feat(ui): allow immediate user input during startup by @sehoon38 in #23661
• refactor(sandbox): reorganize Windows sandbox files by @galz10 in #23645
• fix(core): improve remote agent streaming UI and UX by @adamfweidman in #23633
• perf(cli): optimize --version startup time by @sehoon38 in #23671
• refactor(core): stop gemini CLI from producing unsafe casts by @gundermanc in #23611
• use enableAutoUpdate in test rig by @scidomino in #23681
• feat(core): change user-facing auth type from oauth2 to oauth by @adamfweidman in #23639
• chore(deps): fix npm audit vulnerabilities by @scidomino in #23679
• test(evals): fix overlapping act() deadlock in app-test-helper by @Adib234 in #23666
• feat(evals): centralize test agents into test-utils for reuse by @Samee24 in #23616
• revert: chore(config): disable agents by default by @abhipatel12 in #23672
• fix(plan): update telemetry attribute keys and add timestamp by @Adib234 in #23685
• fix(core): prevent premature MCP discovery completion by @jackwotherspoon in #23637
• feat(browser): add maxActionsPerTask for browser agent setting by @cynthialong0-0 in #23216
• fix(core): improve agent loader error formatting for empty paths by @adamfweidman in #23690
• fix(cli): only show updating spinner when auto-update is in progress by @scidomino in #23709
• Refine onboarding metrics to log the duration explicitly and use the tier name. by @yunaseoul in #23678
• chore(tools): add toJSON to tools and invocations to reduce logging verbosity by @alisa-alisa in #22899
• fix(cli): stabilize copy mode to prevent flickering and cursor resets by @mattKorwel in #22584
• fix(test): move flaky ctrl-c-exit test to non-blocking suite by @mattKorwel in #23732
• feat(skills): add ci skill for automated failure replication by @mattKorwel in #23720
• feat(sandbox): implement forbiddenPaths for OS-specific sandbox managers by @ehedlund in #23282
• fix(core): conditionally expose additional_permissions in shell tool by @galz10 in #23729
• refactor(core): standardize OS-specific sandbox tests and extract linux helper methods by @ehedlund in #23715
• format recently added script by @scidomino in #23739
• fix(ui): prevent over-eager slash subcommand completion by @keithguerin in #20136
• Fix dynamic model routing for gemini 3.1 pro to customtools model by @kevinjwang1 in #23641
• feat(core): support inline agentCardJson for remote agents by @adamfweidman in #23743
• fix(cli): skip console log/info in headless mode by @cynthialong0-0 in #22739
• test(core): install bubblewrap on Linux CI for sandbox integration tests by @ehedlund in ...

Release v0.37.0-preview.0

What's Changed

• feat(evals): centralize test agents into test-utils for reuse by @Samee24 in #23616
• revert: chore(config): disable agents by default by @abhipatel12 in #23672
• fix(plan): update telemetry attribute keys and add timestamp by @Adib234 in #23685
• fix(core): prevent premature MCP discovery completion by @jackwotherspoon in #23637
• feat(browser): add maxActionsPerTask for browser agent setting by @cynthialong0-0 in #23216
• fix(core): improve agent loader error formatting for empty paths by @adamfweidman in #23690
• fix(cli): only show updating spinner when auto-update is in progress by @scidomino in #23709
• Refine onboarding metrics to log the duration explicitly and use the tier name. by @yunaseoul in #23678
• chore(tools): add toJSON to tools and invocations to reduce logging verbosity by @alisa-alisa in #22899
• fix(cli): stabilize copy mode to prevent flickering and cursor resets by @mattKorwel in #22584
• fix(test): move flaky ctrl-c-exit test to non-blocking suite by @mattKorwel in #23732
• feat(skills): add ci skill for automated failure replication by @mattKorwel in #23720
• feat(sandbox): implement forbiddenPaths for OS-specific sandbox managers by @ehedlund in #23282
• fix(core): conditionally expose additional_permissions in shell tool by @galz10 in #23729
• refactor(core): standardize OS-specific sandbox tests and extract linux helper methods by @ehedlund in #23715
• format recently added script by @scidomino in #23739
• fix(ui): prevent over-eager slash subcommand completion by @keithguerin in #20136
• Fix dynamic model routing for gemini 3.1 pro to customtools model by @kevinjwang1 in #23641
• feat(core): support inline agentCardJson for remote agents by @adamfweidman in #23743
• fix(cli): skip console log/info in headless mode by @cynthialong0-0 in #22739
• test(core): install bubblewrap on Linux CI for sandbox integration tests by @ehedlund in #23583
• docs(reference): split tools table into category sections by @sheikhlimon in #21516
• fix(browser): detect embedded URLs in query params to prevent allowedDomains bypass by @tony-shi in #23225
• fix(browser): add proxy bypass constraint to domain restriction system prompt by @tony-shi in #23229
• fix(policy): relax write_file argsPattern in plan mode to allow paths without session ID by @Adib234 in #23695
• docs: fix grammar in CONTRIBUTING and numbering in sandbox docs by @splint-disk-8i in #23448
• fix(acp): allow attachments by adding a permission prompt by @sripasg in #23680
• fix(core): thread AbortSignal to chat compression requests (#20405) by @SH20RAJ in #20778
• feat(core): implement Windows sandbox dynamic expansion Phase 1 and 2.1 by @scidomino in #23691
• Add note about root privileges in sandbox docs by @diodesign in #23314
• docs(core): document agent_card_json string literal options for remote agents by @adamfweidman in #23797
• fix(cli): resolve TTY hang on headless environments by unconditionally resuming process.stdin before React Ink launch by @cocosheng-g in #23673
• fix(ui): cleanup estimated string length hacks in composer by @keithguerin in #23694
• feat(browser): dynamically discover read-only tools by @cynthialong0-0 in #23805
• docs: clarify policy requirement for general.plan.directory in settings schema by @jerop in #23784
• Revert "perf(cli): optimize --version startup time (#23671)" by @scidomino in #23812
• don't silence errors from wombat by @scidomino in #23822
• fix(ui): prevent escape key from cancelling requests in shell mode by @PrasannaPal21 in #21245
• Changelog for v0.36.0-preview.0 by @gemini-cli-robot in #23702
• feat(core,ui): Add experiment-gated support for gemini flash 3.1 lite by @chrstnb in #23794
• Changelog for v0.36.0-preview.3 by @gemini-cli-robot in #23827
• new linting check: github-actions-pinning by @alisa-alisa in #23808
• fix(cli): show helpful guidance when no skills are available by @Niralisj in #23785
• fix: Chat logs and errors handle tail tool calls correctly by @googlestrobe in #22460
• Don't try removing a tag from a non-existent release. by @scidomino in #23830
• fix(cli): allow ask question dialog to take full window height by @jacob314 in #23693
• fix(core): strip leading underscores from error types in telemetry by @yunaseoul in #23824
• Changelog for v0.35.0 by @gemini-cli-robot in #23819
• feat(evals): add reliability harvester and 500/503 retry support by @alisa-alisa in #23626
• feat(sandbox): dynamic Linux sandbox expansion and worktree support by @galz10 in #23692
• Merge examples of use into quickstart documentation by @diodesign in #23319
• fix(cli): prioritize primary name matches in slash command search by @sehoon38 in #23850
• Changelog for v0.35.1 by @gemini-cli-robot in #23840
• fix(browser): keep input blocker active across navigations by @kunal-10-cloud in #22562
• feat(core): new skill to look for duplicated code while reviewing PRs by @devr0306 in #23704
• fix(core): replace hardcoded non-interactive ASK_USER denial with explicit policy rules by @ruomengz in #23668
• fix(plan): after exiting plan mode switches model to a flash model by @Adib234 in #23885
• feat(gcp): add development worker infrastructure by @mattKorwel in #23814
• fix(a2a-server): A2A server should execute ask policies in interactive mode by @kschaab in #23831
• feat(core): define TrajectoryProvider interface by @sehoon38 in #23050
• Docs: Update quotas and pricing by @jkcinouye in #23835
• fix(core): allow disabling environment variable redaction by @galz10 in #23927
• feat(cli): enable notifications cross-platform via terminal bell fallback by @genneth in #21618
• feat(sandbox): implement secret visibility lockdown for env files by @DavidAPierce in #23712
• fix(core): remove shell outputChunks buffer caching to prevent memory bloat and sanitize prompt input by @spencer426 in #23751
• feat(core): implement persistent browser session management by @kunal-10-cloud in #21306
• refactor(core): delegate sandbox denial parsing to SandboxManager by @scidomino in #23928
• dep(update) Update Ink version to 6.5.0 by @jacob314 in #23843
• Docs: Update 'docs-writer' skill for relative links by @jkcinouye in #21463
• Changelog for v0.36.0-preview.4 by @gemini-cli-robot in #23935
• fix(acp): Update allow approval policy flow for ACP clients to fix config persistence and compatible with TUI by @sripasg in #23818
• Changelog for v0.35.2 by @gemini-cli-robot in #23960
• ACP integration documents by @g-samroberts in #22254
• fix(core): explicitly se...

Release v0.36.0

What's Changed

• Changelog for v0.33.2 by @gemini-cli-robot in #22730
• feat(core): multi-registry architecture and tool filtering for subagents by @akh64bit in #22712
• Changelog for v0.34.0-preview.4 by @gemini-cli-robot in #22752
• fix(devtools): use theme-aware text colors for console warnings and errors by @SandyTao520 in #22181
• Add support for dynamic model Resolution to ModelConfigService by @kevinjwang1 in #22578
• chore(release): bump version to 0.36.0-nightly.20260317.2f90b4653 by @gemini-cli-robot in #22858
• fix(cli): use active sessionId in useLogger and improve resume robustness by @mattKorwel in #22606
• fix(cli): expand tilde in policy paths from settings.json by @abhipatel12 in #22772
• fix(core): add actionable warnings for terminal fallbacks (#14426) by @spencer426 in #22211
• feat(tracker): integrate task tracker protocol into core system prompt by @anj-s in #22442
• chore: add posttest build hooks and fix missing dependencies by @NTaylorMullen in #22865
• feat(a2a): add agent acknowledgment command and enhance registry discovery by @alisa-alisa in #22389
• fix(cli): automatically add all VSCode workspace folders to Gemini context by @sakshisemalti in #21380
• feat: add 'blocked' status to tasks and todos by @anj-s in #22735
• refactor(cli): remove extra newlines in ShellToolMessage.tsx by @NTaylorMullen in #22868
• fix(cli): lazily load settings in onModelChange to prevent stale closure data loss by @KumarADITHYA123 in #20403
• feat(core): subagent local execution and tool isolation by @akh64bit in #22718
• fix(cli): resolve subagent grouping and UI state persistence by @abhipatel12 in #22252
• refactor(ui): extract SessionBrowser search and navigation components by @abhipatel12 in #22377
• fix: updates Docker image reference for GitHub MCP server by @jhhornn in #22938
• refactor(cli): group subagent trajectory deletion and use native filesystem testing by @abhipatel12 in #22890
• refactor(cli): simplify keypress and mouse providers and update tests by @scidomino in #22853
• Changelog for v0.34.0 by @gemini-cli-robot in #22860
• test(cli): simplify createMockSettings calls by @scidomino in #22952
• feat(ui): format multi-line banner warnings with a bold title by @keithguerin in #22955
• Docs: Remove references to stale Gemini CLI file structure info by @g-samroberts in #22976
• feat(ui): remove write todo list tool from UI tips by @aniruddhaadak80 in #22281
• Fix issue where subagent thoughts are appended. by @gundermanc in #22975
• Feat/browser privacy consent by @kunal-10-cloud in #21119
• fix(core): explicitly map execution context in LocalAgentExecutor by @akh64bit in #22949
• feat(plan): support plan mode in non-interactive mode by @ruomengz in #22670
• feat(core): implement strict macOS sandboxing using Seatbelt allowlist by @ehedlund in #22832
• docs: add additional notes by @abhipatel12 in #23008
• fix(cli): resolve duplicate footer on tool cancel via ESC (#21743) by @ruomengz in #21781
• Changelog for v0.35.0-preview.1 by @gemini-cli-robot in #23012
• fix(ui): fix flickering on small terminal heights by @devr0306 in #21416
• fix(acp): provide more meta in tool_call_update by @Mervap in #22663
• docs: add FAQ entry for checking Gemini CLI version by @surajsahani in #21271
• feat(core): resilient subagent tool rejection with contextual feedback by @abhipatel12 in #22951
• fix(cli): correctly handle auto-update for standalone binaries by @bdmorgan in #23038
• feat(core): add content-utils by @adamfweidman in #22984
• fix: circumvent genai sdk requirement for api key when using gateway auth via ACP by @sripasg in #23042
• fix(core): don't persist browser consent sentinel in non-interactive mode by @jasonmatthewsuhari in #23073
• fix(core): narrow browser agent description to prevent stealing URL tasks from web_fetch by @gsquared94 in #23086
• feat(cli): Partial threading of AgentLoopContext. by @joshualitt in #22978
• fix(browser-agent): enable "Allow all server tools" session policy by @cynthialong0-0 in #22343
• refactor(cli): integrate real config loading into async test utils by @scidomino in #23040
• feat(core): inject memory and JIT context into subagents by @abhipatel12 in #23032
• Fix logging and virtual list. by @jacob314 in #23080
• feat(core): cap JIT context upward traversal at git root by @SandyTao520 in #23074
• Docs: Minor style updates from initial docs audit. by @g-samroberts in #22872
• feat(core): add experimental memory manager agent to replace save_memory tool by @SandyTao520 in #22726
• Changelog for v0.35.0-preview.2 by @gemini-cli-robot in #23142
• Update website issue template for label and title by @g-samroberts in #23036
• fix: upgrade ACP SDK from 0.12 to 0.16.1 by @sripasg in #23132
• Update callouts to work on github. by @g-samroberts in #22245
• feat: ACP: Add token usage metadata to the send method's return value by @sripasg in #23148
• fix(plan): clarify that plan mode policies are combined with normal mode by @ruomengz in #23158
• Add ModelChain support to ModelConfigService and make ModelDialog dynamic by @kevinjwang1 in #22914
• Ensure that copied extensions are writable in the user's local directory by @kevinjwang1 in #23016
• feat(core): implement native Windows sandboxing by @mattKorwel in #21807
• feat(core): add support for admin-forced MCP server installations by @gsquared94 in #23163
• chore(lint): ignore .gemini directory and recursive node_modules by @mattKorwel in #23211
• feat(cli): conditionally exclude ask_user tool in ACP mode by @nmcnamara-eng in #23045
• feat(core): introduce AgentSession and rename stream events to agent events by @mbleigh in #23159
• feat(worktree): add Git worktree support for isolated parallel sessions by @jerop in #22973
• Add support for linking in the extension registry by @kevinjwang1 in #23153
• feat(extensions): add --skip-settings flag to install command by @Ratish1 in #17212
• feat(telemetry): track if session is running in a Git worktree by @jerop in #23265
• refactor(core): use absolute paths in GEMINI.md context markers by @SandyTao520 in #23135
• fix(core): add sanitization to sub agent thoughts and centralize utilities by @devr0306 in #22828
• feat(core): refine User-Agent for VS Code traffic (unified format) by @sehoon38 in #23256
• Fix schema for ModelChains by @kevinjwang1 in #23284
• test(cli): refactor tests for async render utilities by @scidomino in #23252
• feat(core): add security prompt for browse...

Release v0.36.0-preview.8

Full Changelog: v0.36.0-preview.7...v0.36.0-preview.8

Release v0.36.0-preview.7

Full Changelog: v0.36.0-preview.6...v0.36.0-preview.7

Release v0.36.0-preview.6

What's Changed

• fix(patch): cherry-pick 765fb67 to release/v0.36.0-preview.5-pr-24055 to patch version v0.36.0-preview.5 and create version 0.36.0-preview.6 by @gemini-cli-robot in #24061

Full Changelog: v0.36.0-preview.5...v0.36.0-preview.6